The  Grill:  Xerox  CEO  Anne  Mulcahy  talks  about  wielding  power, 
making  tough  decisions  and  bringing  the  company  back  to  life,  page  22 


COMPUTERWORLD 


Can  Web  2.0 

Save  BP 

Mashups  could  be  the  answer 
to  Bl’s  problems,  page  26 


COMPUTERWORLD.COM 


Inside 

SEPTEMBER  1.  2008 

VOL.  42.  NO.  35  S5/COPY 

News  Analysis 

AT&T  gives  iPhone 
users  some  new  -  but 
pricey  -  international 
data  options,  page  io 

The  slow  economy  is 
affecting  IT  hiring. 
But  there  are  some 
bright  spots,  page  ia 

The  Best  Western 
breach  case  shows 
why  you  should  be 
ready  when  trouble 
checks  in.  page  20 


Opinion 

The  state  of  IT  work 
this  Labor  Day? 
Paradoxical,  page  48 


Careers 

Are  you  a  Rational 
Architect  or  an  Arti¬ 
san  Performer?  Your 
personality  type  can 
determine  your  ideal 
IT  job.  PAOE  44 


Don’t  Miss . . . 

A  Web  app  can  help 
college  students  find 
free  rides  and  avoid  the 
deadly  mix  of  drinking 
and  driving,  page  e 


Energy  consumption  in  datacenters  is  expected  to  double  in  the  next  five  years.  Yet  many 
businesses  stili  don’t  know  how  much  energy  their  IT  Is  using.  So  how  do  you  build  and 
manage  you* IT  to  reduce  energy  consumption?  With  greener  software  from  IBM:  a  complete 
range.of  energy-efficient  software  to  optimize  your  infrastructure,  boost  business  process 
efficiertcy  and  put  practices  in  place  for  truly  responsible  collaboration.  With  energy  at" 
a  premiumt  greerler  software  can  help  shave  millions  off  your  IT  and  energy  budgets.' 
A  greener  world  starts  with  greener  business.  Greener  business  starts  with  IBM. 
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tpaca  aboard  a  laptop  on  the  Inter¬ 
national  Space  Station.  |  Notffix 
fingers  faulty  hardware  lor  delays 
in  shipping  DVDs  to  customers. 

13  The  Now  York  Mata  step  up  to 
the  plate  on  unHiad  communica¬ 
tions  at  their  new  ballpark. 


y  iVtdltPQti.. 

"W  A 


But  Only  Those  With  tha  Right 
SMNsNesd  Apply.  Despite  the 
economic  malaise  in  the  U.S.,  IT 
hiring  is  showing  signs  of  life.  In  fact. 

filling  job  openings. 


paper  over  the  scope  of  a  system 
intrusion  at  the  hotel  chain  shows 
why  companies  need  to  be  proactive 
about  disclosing  data  breaches. 
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6  Editor's  Note:  Don  Tennant 

explains  how  technology  helps 
keep  partying  students  off  the  roads 
around  Texas  A4M. 


44  Career  Watch:  Do  You 
Know  Your  Typo?  Your  personal¬ 
ity  influences  your  career  choice. 

48  Shark  Tank:  Sometimes  the 
best  way  to  train  people  is  to  show 
them  what  not  to  do. 

48  Frankly  Speaking:  Frank 
Hayoa  finds  a  number  of  contradic¬ 
tions  as  he  sums  up  the  state  of  (T  on 
Labor  Day 2008. 


26  Can  Web  2.0 
Save  Bl? 

Welcome  to  Business  Intelligence  2.0.  a  world  in 
which  more  everyday  users  are  tapping  into  innovative 
technologies  and  Web-based  Bl  capabilities.  At  the 
Ogden.  Utah,  police  department  for  example,  officers 
perform  geographic  profiling  of  crimes  in  seconds. 

"You  have  practitioners  asking  the  what-ifguestions, 
which  has  changed  the  way  we  poBce."  says  chief 
Jon  Greiner  (below).  Also.  Bl  mashups  don't  force 
IT  to  give  up  control,  but  they  do  put  the  focus  on  data 
quality  and  data  integration. 

32  Better  Bl - 

These  five  organizations  are  us¬ 
ing  Web  2.0  technologies  to  dig 
deeper  into  their  data,  helping  them 
calculate  risk,  map  customer  be- 


■  32  Boyne  Resorts.  Market¬ 
ing  staffers  at  this  god  and  ski 
resort  operator  use  Bl  and  map¬ 
ping  to  learn  more  about  customer 
behavior,  such  as  the  number  of 
visits  made  to  a  particular  resort  or 
how  many  nights  visitors  stayed. 


■  34  Dana-Farber  Cancer  Institute.  Usinga 
Bl  mashup.  researchers  at  this  research  and  treatment 
facility  can  view  genetic  information  from  multiple 
databases  with  a  specially  designed  Web  portal. 

■  36  Erianger  Police  Department.  By  mashing 
together  search.  Bl  and  mapping,  officers  at  this  Ken¬ 
tucky  police  department  can  view  real-time  crime  data 
frommultipleagenciesaswellas  crime  records  and 
incident  reports  stretching  back  five  years. 

■  38  Guy  Carpenter  4  Co.  Location  intelligence 
company  Guy  Carpenter  &  Co.  prepare  itself  and  its 
-  by  weather. 


Web  2.0  mashup  that  allows  its 
engineers  and  others  to  search 
for  parts  information  in  a  Google- 
like  format 

42  Opinion 

Columnist  Mark  Hall  frets  that 
.  mashups  will  make  networks 
|  even  less  secure.  The  key  is  to 
I  get  smashed,  not  mashed. 
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Novell  and  Microsoft: 
Good  Together,  Except 
For  One  Thing... 


More  Evidence  That 
Google’s  Mojo  Is  Gone 


Internet  Explorer  8  Beta  2 
Offer  s  Some  Nifty  New  Features 

Microsoft's  latest  beta  of  IE8  includes  better  tab  management, 
new  services  such  as  WebSlices  and  Accelerators,  and  an 
interesting  feature  that  some  people  call  "porn  mode." 
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■  EDITOR’S  NOTE 

Don  Tennant 


Gig  ’em,  Aggies! 


to  take  CARPOOL  nation¬ 
wide,  lb  that  end,  Oswalt 


AS  I  WRITE  THIS,  a  group  of  Texas  A&M  Univer¬ 
sity  students  is  gathered  in  College  Station  to  make 
plans  for  the  coming  year.  Like  many  college  stu¬ 
dents  across  the  nation,  they’re  talking  about 
drinking  and  partying.  Unlike  the  vast  majority,  these  Texas 


recently  built  a  new  version 
of  the  phone  room  app  in 
PHP,  because  he’d  heard 
that  his  counterparts  at  sev¬ 
eral  other  interested  schools 
are  more  familiar  with  PHP 
than  with  ASP.  He  licensed 
the  app  under  a  Creative 
Commons  license,  which  al¬ 
lows  other  schools  to  copy, 
share  and  alter  the  applica- 


Aggies  are  formulating 
plans  to  keep  their  drink¬ 
ing  and  partying  class¬ 
mates,  and  the  communi¬ 
ties  they  live  in,  safe. 


maraderie  and  spirit  of  ser¬ 
vice  that  were  already  its 
hallmarks.  He  joined  as  a 
driver,  but  it  soon  became 
clear  that  there  was  a  way 


interface  for  the  reporting 
database  that  dramatically 
eased  the  debriefing  effort 
and  improved  the  quality 
of  data  used  for  basic  analy- 


tion  as  long  as  attribution  is 
maintained. 

Oswalt  mentioned  that 
he's  sent  the  app  to  several 
other  schools,  including 


The  students  are  mem- 


to  make  a  much  more  last- 


sis.  By  tracking  how  many 


James  Madison  University 


bers  of  CARPOOL,  a  non¬ 
profit  campus  organization 
that  provides  free  rides 
so  students  can  avoid  the 
deadly  mi*  of  drinking  and 
driving.  Joining  them  are 
several  alumni,  including 
Jeff  Schiefelbein,  class  of 
2000,  who  founded  the  or¬ 
ganization  following  a  1997 
DWI  arrest  That  life-alter¬ 
ing  experience  brought 
Schiefelbein  in  contact 
with  a  woman  who  showed 
him  a  photo  of  her  daugh¬ 
ter.  who  had  been  killed 
by  a  drunken  driver.  CAR- 
POOL  was  his  response. 

Also  attending  the  gath- 
ering  is  John-Michael  Os¬ 
walt,  class  of 2007,  who’s 
now  working  at  Accenture 
in  New  York  and  is  under¬ 
going  training  to  be  an  SAP 
project  consultant.  Oswalt 
is  the  technology  guru 
behind  CARPOOL,  and  I 
spoke  with  him  shortly  be¬ 
fore  the  gathering. 

He  said  he  got  involved 
in  CARPOOL  as  a  fresh¬ 
man,  attracted  by  the  ca- 


ing  contribution:  by  using 
technology  to  make  it  far 
easier  to  ensure  that  rides 
were  available  when  and 
where  they  were  needed. 

As  a  mechanical  engi¬ 
neering  major,  Oswalt  had 
no  real  programming  expe¬ 
rience,  so  he  took  a  learn- 
by-doing  approach  that 
began  with  tackling  ASP 
to  build  more  functional¬ 
ity  into  the  organization’s 
registration  Web  site.  He 
cut  his  database  teeth  with 
three  MySQL  databases  on 
the  back  end:  one  for  sign¬ 
up  and  membership  infor¬ 
mation,  one  for  scheduling 
and  ride  data,  and  one  for 
nightly  reporting  of  assign¬ 
ment  and  debriefing  de¬ 
tails.  Oswalt  built  an  AJAX 


■  Oswalt,  the 
technology  guru 
behindOffiPOOL, 
was  attracted  by 
the  group’s  cama¬ 
raderie  and  spirit 
of  service. 


rides  are  provided  in  Col¬ 
lege  Station  and  the  neigh¬ 
boring  town  of  Bryan,  for 
example,  CARPOOL  can 
provide  the  documentation 
needed  to  request  grants 
from  the  two  jurisdictions. 

Oswalt  also  used  ASP 
to  develop  the  “phone 
room”  application  used  by 
the  dispatchers.  Because 
of  concerns  about  the 
chaos  that  would  ensue  if 
Internet  connectivity  was 
lost  on  a  busy  night,  he 
installed  the  app  on  a  LAN 
using  Microsoft's  Internet 
Information  Services. 

“I  feel  like  I  learned  a  lot, 
and  that’s  partially  what 
got  me  my  job  at  Accen¬ 
ture,”  Oswalt  said,  stress¬ 
ing  that  he  encourages 
students  to  get  involved  in 
activities  like  CARPOOL 
“It  really  opened  the  door 
to  me  to  find  out  how  many 
opportunities  there  are  to 
be  creative  with  technology 
and  to  learn  new  things.” 

The  Aggies  are  eager  to 
work  with  other  universities 


in  Harrisonburg,  Va.  His 
mention  of  that  particular 
school  hit  close  to  home. 
That’s  the  school  I  attend¬ 
ed  during  my  first  year  out 
of  high  school,  back  when 
it  was  called  Madison 
College. 

I  don’t  drink,  but  I  cer¬ 
tainly  don’t  judge  anybody 
who  does.  I’m  too  thankful 
that  I  never  hurt  myself 
or  anyone  else  during  my 
drinking  days  as  one  of 
the  dumber  18-year-olds  at 
Madison.  And  I’m  equally 
thankful  to  the  Texas  A&M 
students  and  alumni  behind 
CARPOOL  who  have  made 
College  Station,  Harrison¬ 
burg  and  a  growing  number 
of  other  communities  safer. 
As  they  say  in  College  Sta- 
tion:  Gig  ’em.  Aggies!  ■ 

Don  Tonnant  is  editorial 
director  of  Computerworld 
and  InfoWorld.  Contact 
him  at  don_tennant@ 
computerworid.com,  and 
visit  his  blog  at  http:// 
blogs.computerworld.com/ 
tennant. 
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■  ONLINE  CHATTER 


RESPONSE  TO: 

The  Grill:  Avi  Rubin 

Aug.  18, 2008 


The  good  news  is  there  is  a  grow¬ 
ing  awareness  among  ordinary 
citizens,  who  understand  that  their 
votes  are  at  risk  with  today’s  elec¬ 
tion  systems.  The  bad  news  is  that 
in  Florida,  we’re  no  better  off  than 
we  were  in  2000.  Why?  Because 
following  each  successive  election 
failure,  we  rush  out  to  buy  new  vot¬ 
ing  machines.  But  we  never  address 

audits,  and  improved  technology 
and  processes  aside,  even  perfect 
systems  fail.  And  until  we  change 
our  election  laws  to  recognize 
failed  elections  and  send  them  im¬ 
mediately  back  to  the  voters,  we’re 
in  a  perpetual  2000  do-over,  where 
the  court  systems  and  the  party  in 
power  control  the  win. 

■  Submitted  by:  Lan  i  Brown 

RESPONSES  TO: 

Gag  Order  Against 
MIT  Students  Gets 
Another  Day  in  Court 

Aug.  18, 2008 

Freedom  of  speech  is  primarily  for 
keeping  government  in  check.  But 
it  does  not  grant  the  right  to  say 
anything,  anytime.  You  can’t  yell 
“Fire!’’  in  a  crowded  theater  and 
call  it  freedom  of  speech:  you’ll  go 
to  jail.  Try  cussing  out  a  police  of¬ 
ficer  sometime  and  call  it  freedom  of 
speech.  I’ll  come  visit  you  in  jail. 

The  MiFare  Classic  vuln  has 
existed  for  well  over  a  year.  The 


The  MIT  students’  tongue-in-cheek 
comment,  “What  this  talk  is  not: 
evidence  in  court  (hopefully),”  may 
bite  them.  It  may  bite  the  rest  of  us 
also.  If  sarcasm  is  taken  as  literal 
speech,  many  human  activities  will 
become  deadly  dull. 

■  Submitted  by:  Mark  Walker 

RESPONSE  TO: 

IT  Schools  to  Watch 

Aug.  18, 2008 

I  was  surprised  to  see  innovative 
programs  left  off  the  top  10  list. 
Northwestern  and  Princeton, 
for  example,  offer  programs  that 
provide  innovative  thought  leader¬ 

ship  and  house  quite  well-noted 
successes  —  both  business-  and 

technology-related. 

■  Submitted  by:  KL  Koenig 

AThird  of  New  PCs 
Being  Downgraded  to 
XP,  Says  Researcher 

Aug.  18, 2008 

Regardless  of  the  accuracy  of  the 
Devil  Mountain  Software  estimate, 
if  end  users  were  knowledgeable 
enough  to  perform  the  downgrade 
process,  and  if  machines  sold  with 
Windows  Vista  Home  were  eligible 
for  downgrade,  the  downgrade  per¬ 
centage  would  likely  approach  80%. 

■  Submitted  by:  Rick 

I  have  found  Vista  to  be  rock  solid 
and  fast.  I  will  NEVER  go  back  to 
XP.  Vista’s  incredible  search  fea¬ 
ture  alone  justifies  the  upgrade: 


P.O.  Box  9171. 1  Speen  Street 
Framingham,  MA  01701 

(508)879-0700 


vendor  has  been  trying  like  mad 
to  keep  it  under  cover  because  it 
has  such  a  huge  installed  customer 
base.  Fixing  all  those  chips  is  go¬ 
ing  to  be  expensive  and  might  even 
run  the  company  into  the  ground. 
That’s  why  they  don’t  want  to  pub¬ 
lish  it. 

The  fix  might  be  easy,  but  imple¬ 
menting  it  is  expensive,  especially 
if  you’ve  got  chips  embedded  in  ID 
cards,  key  fobs,  or  programmed  into 
mass  transit  fare  purchase  systems. 
■  Submitted  by:  Robert  M 


there  are  no  icons  on  my  desktop, 
simply  because  a  search  will  quick¬ 
ly  produce  anything,  whether  it's  a 
folder,  file,  or  some  obscure  control 
panel  object.  And  if  I  can’t  recall 
the  specific  name,  Vista  seems  to 
know  what  it  is  I’m  looking  for. 
Simply  incredible. 

■  Submitted  by:  oceanstate65 


JOIN  THE  CHATTER!  You,  too,  can 
comment  directly  on  our  stories, 
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THE  WEEK  AHEAD 

TUESDAY:  Hewlett-Packard  plans  to  announce  a  variety 
of  technologies  supporting  virtualization,  including  a  blade 
server  designed  specifically  to  host  virtual  machines. 


WEDNESDAY:  The  Virtual  Worlds  Expo  opens  in  Los  Angeles: 


fering  for  large  businesses 
with  many  workers  who 
travel  abroad. 

The  IT  manager,  who 
asked  not  to  be  identi¬ 
fied,  said  his  company  has 
banned  corporate  purchases 
of  Apple  Inc.’s  new  iPhone 
3G  because  of  the  “psycho- 
expensive”  international 
data-roaming  charges  in¬ 
curred  by  employees  using 
first-generation  iPhones. 

For  example,  one  ex¬ 
ecutive  spent  three  days  in 
Canada  and  was  assessed 
an  $800  roaming  fee,  the 
IT  manager  said  He  added 
that  another  exec  spent 
two  weeks  in  Italy  and  was 
charged  $5,000  for  roaming. 

One  issue  is  that  the 
iPhone  "uses  10  times  the 
data  as  any  other  device,” 
said  the  IT  manager,  whose 
company  has  4,000  Black- 
Berry  devices  that  are  used 
primarily  for  e-mail. 


0PERATINQ  SYSTEMS 


Ups  Notices 
To  XP  Pirates 


■  NEWS  DIGEST 


Short 

likes 


■ 

Jgllg^^H  NASA  says  a  Dug  found  on  a  spate  station  laptop  poses  no  threat. 

daily  log  by  space  station 
Commander  Sergey  Volkov 
on  Aug.  U.  Volkov  reported 

Malware  Infects 

finding  the  malware  after 
running  “digital  photo  flash 
cards  from  stowage  through 
a  virus  check  with  the  Nor¬ 

Space  Station  Laptop 

■  ■  ALWAREhas  detected  it  on  July  25.  The 

once  again  man-  SpaceRef.com  news  site 

ton  Antivirus  application." 

A  week  later,  on  Aug.  21, 
Volkov’s  daily  report  noted 
the  discovery  of  malware 
during  a  scan  of  the  hard 

IWI  Earth  onto  the  as  W32.Gammima.AG. 

International  Space  Sta-  The  spokesman  said  the 

tion,  a  NASA  spokesman  worm  posed  no  threat  to 

another  laptop  computer. 

Graham  Cluley,  a  con¬ 
sultant  at  Sophos  PLC, 

national  operation  led  by  The  spokesman  refused  to  steal  usernames  and 

the  U.S.  and  Russian  space  to  disclose  how  the  malware  passwords  from  computer 

agencies.  was  installed  on  the  comput-  game  players,”  and  orbiting 

The  NASA  spokesman  er,  though  an  entry  into  the  astronauts  aren’t  likely  to 

declined  to  identify  the  station’s  daily  logs,  posted  on  be  spending  a  lot  of  time 

malware,  saying  only  that  NASA’s  Web  site,  suggests  playing  games, 

antivirus  software  had  that  digital  camera  storage  —  Gregg  Keizer 


■  NEWS  DIGEST 

BETWEEN  THE  LINES 

By  John  Klossner 

NETWORKING 

New  Mets  Ballpark  Offers 
Unified  Communications 

UjjfS  wwrweVfi 

■1  wwwerew5- 

for  baseball  next  spring.  ticket-scanning  and  submit- 

Joe  Milone,  the  team’s  ting  of  food  orders  from 

senior  director  of  informa-  spectator  seats, 
tion  systems  and  technology,  Nortel’s  Wi-Fi  gear  isn’t 
said  the  project  will  signifi-  yet  rated  for  the  802 Jin 
cantly  improve  communica-  draft  standard,  but  it  can  be 


Milone  said  the  new  stadi-  Milone  said, 
um  gave  the  team  a  unique  |  —Matt Hamblen 

opportunity 


agreed  to 

modify  its  Web  site  and  pay 
I  S6  million  in  damages  to 
settle  a  class-action  lawsuit 
filed  by  the 

The  NFB 

will  test  the  site's  accessibil¬ 
ity  annually  tor  three  years 

completed  its  S13.9  billion 


purchase  of 

a  deal  that 
doubles  HP's  annual  IT  ser¬ 
vices  revenue  to  S38  billion 

Usenet  post  that  he  had 
written  the  kernel  for  a  new 
operating  system,  which  he 
later  named  Linux. 


■  NEWS  ANALYSIS 


For  you,  it’s  a  problem  you  didn’t  see  coming 

For  your  business,  it’s  a  customer 
you  won’t  see  coming  back. 


LiHn.it  flexibility  EMERSON 

Network  Power 


EMERSON.  CONSIDER  IT  SOLVED. 


■  NEWS  ANALYSIS 


Continued  from  page  14  administrators  and  quality  Hewlett-Packard  use 

That  includes  software  assurance  engineers.  “We're  with  about  50,000  m 

developers  and  people  with  kind  of  across  the  board,"  agreed  that  the  ecorn 


enterprise-class  systems, 
as  well  as  development  and 
technical  program  manag- 


-■agggigi 


sively  hiring,"  he  said.  “It’s  agement  —  espi 
difficult  to  find  candidates."  executives  with 
Meetup,  which  currently  Web  2.0  experit 
employs  about  50  people,  has  “We  know  ou 
five  open  positions  and  is  are  dying  to  get 

seeking  another  10  to  15  work-  those  skills,”  said  lobfox 
ers  to  fill  job  openings  that  spokesman  Barry  Lawrence, 
it  expects  to  post  in  the  near  “Everybody  is  trying  to 
future.  The  New  York-based  improve  the  ways  they  do 
company  is  looking  to  add  business,  to  streamline  in  a 
Java  developers  and  front-  tough  economy." 
end  Web  designers,  as  well  Nina  Buik,  president  of 
as  project  managers,  systems  Connect,  an  independent 


year,  followed  by  an  increase  to  be  pressure  on  IT  si 
of  up  to  10%  in  2009.  The  because  of  the  recession,” 

firm’s  current  IT  staffing  out-  Challenger  said.  But  he  add- 
look  is  virtually  flat  for  this  ed  that  stafling  levels  tend  to 
year,  with  Bartels  projecting  be  less  volatile  in  IT  than  in 
a  1%  increase  in  the  total  other  departments  because 
number  of  IT  jobs  and  aver-  companies  rely  so  heavily 

age  pay  raises  of  3%  to  4%.  on  technology  to  run  their 

But  the  first  half  of 2008  business  operations. 


ING  ABOUT  SERVICE  MANAGEMENT: 


Alternative  thinking  is  repositioning  IT  from  the  server  closet 
to  the  front  lines,  embracing  its  impact  on  the  business 
(seeing  it  go  from  a  PowerPoint*  deck  into  practice). 


It's  rewiring  the  rules  of  engagement  to  identify  problems, 
prioritize  solutions  and  automate  change  (before  things 
become  business  critical). 

It's  partnering  with  HP,  a  pioneering  force  behind  ITIL, 
to  leverage  the  experience  of  certified  consultants  and 
utilize  the  Ingenuity  engrained  in  the  DNA  of  our  software. 


It's  placing  business  metrics  under  the  microscope  every  day, 
every  minute,  every  nanosecond— enhancing  insight  and 
extending  control  (from  a  financial  perspective,  for  a  change) 


. 


Microsoft 


taking  on  dragons,  easy. 


1.  Put  the  fire  out. 

Knowing  what  to  do  if  there's  a  fire  is  always  smart. 
That  the  fire  spews  from  the  mouth  of  a  ferocious 
flying  serpent  should  make  no  difference. 


2.  Give  them  what  they  want. 

Dragons  desire  gold,  jewels,  and  princesses.  Have  any  treasure  around? 

A  nice  watch,  petty  cash,  your  silver  sales  award?  More  on  princesses  later. 


'SI 


3.  Use  the  shrink  spell. 

Arthurian  legend  tells  of  the  wizard  Merlin,  who  would  have  known 
how  to  shrink  an  unruly  dragon.  Magic  wand  and  spells  not  included. 


5.  The  princess  defense. 

That  temp  in  finance — bewigged,  begowned,  and  pushed  Dragon- 
ward— may  just  pass  for  a  princess. 

6.  Dragonslayer. 

You  learn  to  slay  Dragons  by  slaying  Dragons.  Win  this  one  and  you'll 
be  an  in-demand  consultant  to  other  Dragon -besieged  companies. 


taking  on  security  threats,  easier. 


1.  Implement  Microsoft  Forefront. 

Forefront  makes  defending  your  systems  easier.  It’s  a  comprehensive,  simple- 
to-use,  integrated  family  of  products  that  helps  provide  protection  across  your 
client,  server,  and  network  edge.  Learn  how  Del  Monte  Foods  uses  the  Forefront 
family  of  products  to  help  defend  their  systems.  Visit  easyeasier.com 
Forefront  is  business  security  software  for  client,  server,  and  the  network  edge 
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The  hotel  chain  disputed  a 
newspaper  report  that  it  had 
been  hit  by  a  massive  data 
breach.  But  could  it  have  done 
a  better  job  of  defusing  the 
issue?  By  Jaikumar  Vijayan 


The  headline  in  the 
Glasgow  Sunday 
Herald -“Revealed: 
8  Million  Victims  in 
the  World's  Biggest  Cyber 
Heist"  —  was  a  grabber. 

And  it  certainly  got  the 
attention  of  Best  Western 
International  Inc.,  which 
found  itself  scrambling  to 

do  damage  control  after  the 

Scottish  newspaper  report¬ 
ed  that  hackers  had  broken 
into  the  hotel  chain's  online 
reservation  system  and 
stolen  8  million  customer 

records.  The  theft  netted 
data  on  everybody  who  had 
stayed  at  Best  Western’s 
U12  European  hotels  this 
year  and  in  2007,  according 
to  the  Sunday  Herald. 

After  the  story  appeared 
on  Aug.  24,  Phoenix-based 
Best  Western  acknowl¬ 
edged  that  the  Herald  had 
alerted  it  to  a  “possible 
compromise"  of  data.  But 
the  company  disputed  the 
newspaper’s  claims  about 
the  scope  of  the  system 
intrusion,  saying  that  the 
story  was  "grossly  unsub¬ 
stantiated.”  Best  Western 
said  the  breach  had  affected 


just  13  customers  at  a  single 
hotel  in  Berlin  —  a  number 
that  it  later  reduced  to  10. 

Nonetheless,  the  company 
couldn't  stanch  the  flow  of 
online  stories  and  blog  posts 
about  the  data  breach  that 
followed  the  publication  of 
the  Herald's  story.  Best  West¬ 
ern’s  experience  highlights 
the  public  relations  prob¬ 
lems  that  can  result  from 
breach  disclosures  and  the 
need  for  companies  to  have 
comprehensive  incident- 
response  plans  for  dealing 
with  such  disclosures. 

DELAYED  DISCLOSURE 

In  Best  Western’s  case, 
it  could  have  beaten  the 
newspaper  to  the  punch  by 
breaking  the  news  about 
the  breach  itself.  The  intru¬ 
sion  took  place  on  Aug.  21. 
According  to  the  Herald,  it 
brought  the  incident  to  the 
company’s  attention  the  fol¬ 
lowing  day,  two  days  before 
the  story  was  published. 

In  comments  sent  via 
e-mail  last  week,  a  Best 
Western  spokeswoman  indi¬ 
cated  that  the  company  was 
blindsided  by  the  Herald’s 


claims  about  the  scope  of 
the  breach.  The  reporter 
didn’t  ask  about  the  possibil¬ 
ity  that  8  million  records 
had  been  stolen,  the  spokes¬ 
woman  said.  She  said  that  he 
simply  asked  for  the  number 
of  Best  Western  hotels  and 
rooms  in  Europe  and  that  he 
appeared  to  have  used  those 
numbers  to  extrapolate  the 
8  million  figure. 

A  company  whose  sys¬ 
tems  have  been  breached 
should  fully  understand  the 
scope  before  going  public, 
said  Chris  Hoofnagle,  senior 
staff  attorney  at  the  Berkeley 
Center  for  Law  and  Tech¬ 
nology  at  the  University  of 
California,  Berkeley. 

But  even  if  Best  Western 

wasn’t  fully  aware  of  what 

it  was  about  to  be  hit  by, 
it’s  better  for  companies  to 
disclose  breaches  before 

someone  else  does  it  for 
them,  said  Kirk  Nahra,  an 
attorney  who  specializes 
in  data  privacy  and  secu¬ 
rity  issues  at  Wiley  Rein 
LLP  in  Washington. 

Corporate  executives 
are  often  hesitant  to  do  so, 
Nahra  acknowledged,  not¬ 
ing  that  they  have  to  think 
about  different  audiences 
when  disclosing  breaches 
—  including  “lawyers  look¬ 
ing  to  file  lawsuits."  But,  he 
said,  “the  issue  is  how  you 
control  it.  You  do  what  you 
can  to  make  it  a  one-day 
story,  not  a  10-day  story.” 

It  took  Best  Western 
until  last  Tuesday  to  detail 


In  addition  to  being 
scooped  by  the  Herald,  Best 
Western  contradicted  itself 
on  how  quickly  reserva¬ 
tions  data  is  deleted  from  its 
systems.  On  Aug.  24,  it  said 
the  data  is  purged  “promptly 
upon  guest  departure.”  But 
last  Tuesday,  the  company 
amended  that  timing,  saying 
the  data  is  removed  within 
seven  days  of  checkouts. 

John  Pescatore,  an  analyst 
at  Gartner  Inc.,  said  Best 
Western  officials  might  have 
been  caught  a  bit  off-guard 
because  the  breach  was 
brought  to  their  attention  by 


But  the  episode  shows 
why  companies  should  simu¬ 
late  various  worst-case  sce¬ 
narios  when  they  test  their 
incident-response  plans,  Pes¬ 
catore  added.  Best  Western, 
he  said,  may  have  discovered 
what  “many  businesses  learn 
the  first  time  they  have  to  im- 
plement  their  Hisa  sfpr  recov¬ 
ery  plan  —  Oops,  we  should 
have  had  a  dry  run.”*  ■ 
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Their  computer. 
Your  brain. 

GoToAssist  Express  lets  you  view  and  control  your 
customer’s  computer  online,  so  you  can  use  your 
expertise  to  fix  the  problem  yourself.  Resolve  the  issue, 
keep  your  customer  satisfied  and  move  on  to  the  next 
task.  Support  smarter  with  GoToAssist  Express. 

Try  it  free  for  30  days  at  gotoassist.com/computer. 

GoToAssist8 
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■  THE  GRILL 


Anne  Mulcahy 


Theiferox  CEO  talks  about  wielding 
power,  making  tough  decisions  and 

bringing  the  company  back  to  life. 


portunity  right  now,  and  it’s  far  too 
restrictive.  We  have  great  people  who 
are  returning  to  their  native  countries 
because  of  restrictions  here,  and  who 
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Don't  Push  Your  Luck 
With  Your  Push  To  Talk. 

MAKE  THE  SWITCH  TO  VERIZON  WIRELESS. 

Make  your  business  instantly  more  productive  by  upgrading  to  the  only  Push  to  Talk  service 
that  comes  with  the  Verizon  Wireless  Network  and  its  reliable  voice  service,  coast-to-coast 
coverage  and  24/7  customer  service.  Verizon  Wireless.  The  smart  choice  for  Push  to  Talk. 


VBfilOnwireless 


Call  1.800.VZW.4BIZ  Clickverizonwireless.com/pushtotalk  Visit  a  Verizon  Wireless  store 
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Continued  from  page  22 
could  have  gone  on  to  be  U.S.-based 
technologists  and  researchers  and 
contributors.  Just  at  the  time  when  we 
need  to  work  harder  to  keep  people  in 
this  country,  we  have  less  access  than 
we’ve  ever  had  before. 

What  b  your  rasponaa  la  unemployed  IT 
workers  who  meant  (he  H-1B  program? 

You  have  to  look  at  the  Jobs  that  have 
been  created  by  people  who  have  come 
into  this  country.  If  you  look  at  the 
pipeline  of  people  graduating  from  our 
universities,  the  majority  of  these  folks 
in  doctoral  programs  are  foreign- 
based.  It  matters  where  jobs  get  cre¬ 


ated.  These  are  the  kinds  of  people 
that  can  actually  create  jobs,  that  aren’t 
responsible  for  losing  them. 

How  do  we  reverse  the  decline  ofth#  per¬ 
centage  of  woman  in  IT?  Focus  is  hugely 
important  For  example,  I  just  spoke  to 
200  [Xerox  summer]  interns,  and  two 
out  of  five  are  women.  But  we  need  a 
bigger  pipeline,  in  general.  So  one  of 
the  things  Xerox  focuses  on  is  raising 
the  interest  in  areas  like  math  and  sci¬ 
ence  in  secondary  schools.  We  take 
our  engineers  out  to  the  classroom  and 
have  “invention  days.”  We  invest  in  ro¬ 
botics  competitions.  Focusing  on  get¬ 
ting  the  best  talent  suggests  you  ought 
to  be  inclusive,  and  that  means  not  just 
women,  but  [also]  minorities. 

CompufcfWDftfs  annual  IT  salary  survey 
shows  that  tha  gap  in  pay  between  man 
and  women  is  hovering  in  the  10%  to  12% 
range.  To  what  do  you  attribute  that  gap, 
and  how  do  we  dose  it?  Women  some¬ 
times  don’t  have  the  tenure  that  their 
male  counterparts  have.  I  think  you  fix 
it  by  paying  for  results. 

You're  No.  2  on  Fortune's  2007  Most 
Powerful  Women  list.  What  does  that 
feel  ■»?  My  identity  is  Xerox,  and  any 
feedback  I  get  should  be  regarding  my 
success  at  Xerox,  not  so  much  my  stack 
ranking.  I  understand  that  with  so  few 
women  in  leadership  positions,  bring¬ 
ing  attention  to  it  is  a  good  thing.  But  I 
think  my  identity  has  to  be  linked  with 
Xerox  and  my  performance  for  my 
constituencies  there. 

Is  there  anything  you  brought  to  tha  posi¬ 
tion  simply  by  virtue  of  being  female  that 
enabled  you  to  be  mors  effective  than 
your  male  predecessors  had  bean?  No.  I 

like  to  think  there  are  a  lot  of  things  I 
brought  to  the  job  that  have  equipped 
me  to  be  successful  at  Xerox.  But  I 
don’t  attribute  them  to  gender.  If  you 
suggest  that  you  have  inherent  advan¬ 
tages,  then  you  leave  the  door  open  for 
saying  you  have  inherent  disadvantag¬ 
es,  and  I  think  that’s  a  slippery  slope. 

You’ve  said  that  effective  communication 

of  your  turnaround  strategy.  What  was 

No.  2?  Our  investments  in  research 
and  development.  While  we  were  mak¬ 


ing  really  tough  decisions  everywhere 
in  the  company,  we  knew  that  the  long¬ 
term  success  of  the  company  would 
only  be  sustained  if  we  had  a  great 
pipeline  of  innovation. 

What  was  the  single  toughest  decision 
you’ve  had  to  make?  There  were  a  lot 
of  tough  decisions.  One  of  the  most 
memorable  [was]  shutting  down  our 
consumer  business.  It’s  a  business  that 
I  ran,  I  helped  author.  A  business  that 
could  have  had  promise  over  time,  but 
there  wasn’t  time.  Great  people,  a  lot  of 
promise.  Always  tough  to  do,  but  this 
one  was  kind  of  personal. 

Can  you  identify  a  single  best  decision?  I 

don’t  think  so.  I  think  that  we  turned 
the  company  around  on  a  whole  set  of 
fundamental  good  business  practices 
that  we  sustained  for  a  long  period.  No 
magic  formulas  —  just  hard  work  and 
great  people  who  stay  focused  and  can 
accomplish  great  things. 

How  about  a  single  worst  decision? 

There  were  plenty  of  less-than-perfect 
decisions.  For  us,  the  worst  decision 
was  no  decision.  It’s  the  things  you 
don’t  deal  with.  It’s  much  easier  to  fix 
mistakes  than  to  fix  inaction. 

How  much  are  you  investing  in  RAD,  and 

taka  you?  We’re  investing  as  a  company 
just  under  $1  billion  annually.  And  we 
have  a  partner  in  Asia-Pacific,  Fuji  Xe¬ 
rox,  who  invests  $600  million.  Our  two 
biggest  pools  of  investment  are  transi¬ 
tioning  the  world  to  color  and  services. 
About  70%  of  our  total  R&D  is  in  those 
two  areas. 

How  high  on  your  priority  list  is  helping 
companies  with  power  management  and 
being  more  green?  Very  high.  I  was  in 
Dublin  two  weeks  ago.  We  brought 
together  200  very,  very  senior  people, 
and  the  topic  was  sustainability.  We 
have  a  very  long  history  in  being  green 

—  literally  decades.  We  invented 
things  like  remanufacturing  and  reuse. 
I  think  it’s  a  huge  opportunity.  When 
you  look  at  environmental  impact 
and  productivity,  and  —  quite  frankly 

—  profit  improvement,  there’s  a  very 
synergistic  set  of  capabilities. 

— Interview  by  Don  Tannant 
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SPOTLIGHT 


You  have 
practitioners 
asking  the  what-if 
questions,  which 
has  changed  the 
way  we  police. 


By  Julia  King 


I  lav's  how  organizations 
;uv  connecting;  the 
technologies  to  make 
better  business  decisions. 


IK  SPOTLIGHT  BUSINESS  INTELLIGENCE 


SET  At  Excellus  BlueCross 
nation.  BlueShield.  a  health 

.ENTER  insurer  in  Rochester. 

”us 

TustSystems  Inc.'s  XFY  software  and 
experimenting  with  linking  claims 
data  and  wellness  program  data  so 
employers  can  analyze  the  cost  ef¬ 
fectiveness  of  different  programs  and 
benefits.  Looking  ahead.  Axelrod  says 
he  foresees  a  scenario  in  which  people 
who  work  out  at  a  gym  could  have  the 
exercise  equipment  they  use  upload 
data  to  a  Web-based  health  log.  Users 
could  then  combine  that  data  with  oth¬ 
er  information  to  analyze  their  overall 
health  and  progress  toward  their  per¬ 
sonal  goals. 

Mashups,  Axelrod  says,  “solve  the 
old-school  problem  of  data  isolation.” 

Excellus  is  also  using  JustSystems' 
mashup  technology  in  its  customer- 
service  call  centers  to  display  data  on 
a  single  screen,  even  though  that  data 
may  reside  in  multiple  systems  —  in¬ 
cluding  green-screen  and  Web-based 
applications.  Axelrod  says.  JustSystems' 
XFY  technology  can  handle  multiple 
pieces  of  XML  data  simultaneously  on 
Continued  on  page  30 


A  NEW  WAY  OF  THINKING 

One  example  is  the  Massachusetts 
Housing  Finance  Agency.  The  B1  team 
there  has  incorporated  geographical 
mapping  capabilities,  including  loca¬ 
tion  intelligence  features  from  Pitney 
Bowes  Inc.'s  Maplnfo  software,  into  its 
Cognos  Bl  dashboard  as  a  way  to  make 
information  accessible  in  geographical 
form  to  users  across  the  entire  agency. 
Before,  only  12  superusers  had  access  to 
geographical  tools.  Now.  all  300  of  the 
agency's  workers  can  access  and  manip¬ 
ulate  BI  data  in  geographical  form,  says 
Carl  Richardson.  BI  project  manager. 

“We  anticipate  that  more  people  will 
do  analysis."  says  Richardson.  “It  will  al¬ 
low  the  average  user  to  think  geographi¬ 
cally  when  it  comes  to  data.  They  could 


■  SPOTLIGHT  i  BUSINESS  INTELLIGENCE 


Instead,  most  companies  rely  on  al¬ 
ready  overburdened  IT  departments  or 
in-house  teams  of  BI  experts  to  fulfill 
users'  requests  for  reports,  analyses 
and  forecasts,  a  process  that  can  take 
weeks  or  longer.  Then,  when  decision¬ 
makers  finally  receive  a  report,  they 
often  discount  or  distrust  it  because 
the  data  is  no  longer  relevant  or  timely. 

However,  that's  beginning  to  radi¬ 
cally  change,  thanks  to  highly  intuitive, 
easier-to-use  Web-based  user  interfaces 
and  better  data  management  and  access 
schemes,  such  as  service-oriented  data 
architectures,  which  enable  users  to 
mash  up  data  in  increasingly  standard¬ 
ized  formats  from  a  variety  of  sources. 

“We're  seeing  mashups  with  GIS 
mapping  technology  as  well  as  on- 
demand  BI  solutions  that  let  users 
combine  and  display  their  own  data 
with  data  from  external  sources,”  says 
IDC  analyst  Dan  Vesset.  “The  goal  is 
to  get  IT  out  of  development  [of  user 
interfaces  and  reports] 
and  get  them  more  in¬ 
volved  in  data  quality  and 
data  integrations.  That's 
their  highest  value-add.” 

(See  story  at  right.) 

“Another  very  big 
change  is  an  awareness  of 
BI’s  potential  at  the  busi¬ 
ness  management  layer  in  companies,” 
Vesset  notes.  “Business  is  seeing  real 
value  in  analytics.  Many  organizations 
are  starting  information  management 
groups  and  BI  competency  centers  that 
sit  on  the  business  side.” 

A  NEW  WAY  OF  THINKING 

One  example  is  the  Massachusetts 
Housing  Finance  Agency.  The  BI  team 
there  has  incorporated  geographical 
mapping  capabilities,  including  loca¬ 
tion  intelligence  features  from  Pitney 
Bowes  Inc.’s  Maplnfo  software,  into  its 
Cognos  BI  dashboard  as  a  way  to  make 
information  accessible  in  geographical 
form  to  users  across  the  entire  agency. 
Before,  only  12  superusers  had  access  to 
geographical  tools.  Now,  all  300  of  the 
agency’s  workers  can  access  and  manip¬ 
ulate  BI  data  in  geographical  form,  says 
Carl  Richardson,  BI  project  manager. 

“We  anticipate  that  more  people  will 
do  analysis,”  says  Richardson.  "It  will  al¬ 
low  the  average  user  to  think  geographi- 


create  both  thematic  and  point  maps  on 
data,  which  is  important  to  them  in  their 
individual  reporting  groups.” 

One  example  would  be  to  combine 
data  on  housing  units,  loans  and  public 
transportation  so  that  it  could  then  be 
analyzed  and  displayed  in  a  map  for¬ 
mat  to  show  how  many  of  the  agency’s 
housing  units  are  located  close  to  pub¬ 
lic  transportation. 

“Being  able  to  work  with  that  data 
in  graphic  form  as  opposed  to  putting 
that  data  in  a  database  would  allow  us 
to  react  a  lot  quicker,”  Richardson  says. 

For  now,  mapping  tools  are  probably 
the  most  popular  kind  of  BI  mashups, 
also  known  as  “bashups,”  but  experts 
say  the  possibilities  are  almost  endless. 
Technologies  such  as  integrated  search 
and  in-memory  analytics  will  make 
it  easier  to  index  large  amounts  of 
structured  data  and  build  high-perfor¬ 
mance  analytical  applications  against 
increasingly  large  data  sets.  They  also 
promise  to  empower  us¬ 
ers  to  explore  data  and 
discover  new  insights  in 
new  ways. 

At  Excellus  BlueCross 
BlueShield,  a  health 
insurer  in  Rochester, 
N.Y.,  enterprise  architect 
Mike  Axelrod  is  using 
JustSystems  Inc.’s  XFY  software  and 
experimenting  with  linking  claims 
data  and  wellness  program  data  so 
employers  can  analyze  the  cost  ef¬ 
fectiveness  of  different  programs  and 
benefits.  Looking  ahead,  Axelrod  says 
he  foresees  a  scenario  in  which  people 
who  work  out  at  a  gym  could  have  the 
exercise  equipment  they  use  upload 
data  to  a  Web-based  health  log.  Users 
could  then  combine  that  data  with  oth¬ 
er  information  to  analyze  their  overall 
health  and  progress  toward  their  per¬ 
sonal  goals. 

Mashups,  Axelrod  says,  “solve  the 
old-school  problem  of  data  isolation.” 

Excellus  is  also  using  JustSystems' 
mashup  technology  in  its  customer- 
service  call  centers  to  display  data  on 
a  single  screen,  even  though  that  data 
may  reside  in  multiple  systems  —  in¬ 
cluding  green-screen  and  Web-based 
applications,  Axelrod  says.  JustSystems’ 
XFY  technology  can  handle  multiple 
pieces  of  XML  data  simultaneously  on 


II W 

old-school  problem 
of  data  isolation. 


cally  when  it  comes  to  data.  They  could  !  Continued  on  page  30 
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TRACKING  AND  ACCOUNTABILITY 

Another  user.  New  York-based  Thom¬ 
son  Financial,  is  using  Serena  Software 
Inc.'s  MashUp  Composer  to  combine 
information  from  the  company's  Sales- 
force.com  application  and  information 
about  its  various  product  offerings  so 
salespeople  can  produce  customized 
sales  proposals  for  specific  customers 
in  about  three  minutes.  Managers  can 
then  track  the  proposals,  including  the 
authorization  and  extension  of  product 
trials  that  salespeople  offer  customers. 


were  on  a  trial  for  more  than  a  year. 
Now,  if  a  trial  gets  extended  beyond  a 
certain  point  in  time,  it  sets  off  a  trig¬ 
ger  and  the  salesperson  ends  up  in  the 
VP's  office  to  explain.” 

The  upshot  of  the  BI  mashup  is  that 
Thomson  cut  the  time  from  a  product 
trial  to  a  customer  conversion  from 
an  average  of  75  days  to  between  36 
and  40  days. 

While  the  business  benefits  of  user- 
friendly  BI  and  BI  mashups  can  be 
great,  they  aren’t  without  challenges. 

As  is  the  case  with  traditional  BI  and 


tor  means  so  you  can  manage  on  ana¬ 
lytics  rather  than  having  lots  of  one-off 
products  and  [BH  projects.” 

In  larger  enterprises,  IT  itself  can 
be  a  big  roadblock,  says  Hastings- 
Kimball.  “A  lot  of  the  [new  and 
emerging]  BI  mashup  vendors  don’t 
carry  a  big  name.  What  I  ran  into  at 
Thomson  is  that  if  it  didn’t  carry  the 
name  Siebel,  Salesforce.com  or  SAP, 

IT  didn’t  want  to  hear  about  it,”  he 
says.  “IT  wants  these  big  sprawling 
enterprise  applications.  If  it’s  not  that, 
it  scares  the  IT  folks.”  ■ 


Llamas  spit  to  help  guide  and  keep  harmony  in  the  herd. 


They  don’t  have  a  better  way  to  ensure  compliance. 

But  you  can.  With  proven  information  management  software  from  SAS. 


SAS  SOFTWARE,  AT  WORK  IN  97".,  OF  THE  TOP 
100  COMPANIES  ON  THE  2007  FORTUNE  500. 


power 
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SPOTLIGHT 


Better  Bl 


Boyne 

Resorts 

Marketing  staffers  can  view 
customer  behavior  patterns 
at  each  of  the  company’s 
ski  and  golf  resorts. 

By  Thomas  Hoffman 

»>  Bl  PROJECTS  are  frequently  driven 
by  the  demands  of  executives  who 
want  to  scour  dashboards  to  analyze 
sales  and  other  business  trends.  But  at 
Boyne  Resorts,  the  company’s  Bl  di¬ 
rective  was  marshaled  by  its  CIO. 

In  2007,  Chris  Downing,  who  was 


Boyne’s  IT  chief  at  the  time,  asked 
Noah  Meister,  then  an  up-and-coming 
help  desk  support  person,  to  take  the 
lead  on  the  company’s  Bl  effort.  Down¬ 
ing  wanted  dashboards  and  various  re¬ 
ports  that  executives  in  sales,  market¬ 
ing  and  other  business  units  could  sift 
through  to  get  a  better  understanding 
of  customer  behavior. 

It  didn’t  matter  that  Meister  had  no 
Bl  training  or  experience  at  that  point  in 
his  career.  Meister  says  he  was  given  the 
Bl  responsibilities  after  Downing  saw 
promise  in  the  way  he  attacked  technical 
and  business  problems  on  the  help  desk. 

Meister  began  by  trying  to  find  a  bet¬ 
ter  way  for  the  company  to  generate 
reports  and  information  for  its  top 
decision-makers.  Previously,  reports 


were  generated  strictly  by  using  Busi¬ 
ness  Objects’  Crystal  Reports,  which 
had  its  limitations,  he  says. 

“Every  time  somebody  wanted  some¬ 
thing  different  from  a  report,  we’d 
either  have  to  rewrite  a  report  or  write 
an  entirely  new  report,”  says  Meister. 
Phis,  business  executives  questioned 
why  data  in  some  of  the  reports  didn’t 
always  mesh,  he  adds. 

“We  wanted  to  have  the  same  way  of 
reporting  information  across  all  of  the 
resorts,”  says  Meister.  He  evaluated  a 
few  open-source  Bl  systems,  including 
SpagoBI  and  JasperSoft,  but  he  found 
that  it  took  two  to  three  weeks  just  to 
Continued  on  page  34 
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Dana-Farber 

Cancer 

Institute 


By  Jennifer  McAdams 


A  cancer  treatment  and  research 
facility  in  Boston,  Dana-Farber 
is  affiliated  with  Harvard  Medical 
School  and  part  of  a  Comprehen¬ 
sive  Cancer  Center  (as  designated 
by  the  National  Cancer  Institute). 


■  Project  cost  and  payback:  Fund¬ 
ed  by  a  SI  million  Oracle  Challenge 
Grant,  the  system  transforms 
the  way  researchers  approach 
the  problem  of  experimental  de¬ 
sign  and  enhances  their  ability  to 
analyze  experimental  data. 


»>  A  CANCER  that  strikes  white  blood 
cells  and  eventually  bone  marrow, 
multiple  myeloma  can  be  difficult  to 
treat.  Now,  the  Dana-Farber  Cancer  In¬ 
stitute  in  Boston  is  harnessing  the  dual 
power  of  business  intelligence  and 
Web  2.0-based  scientific  search  tools 
to  gather  complex,  scattered  data  to 
better  treat  patients  and  work  toward  a 
cure  for  this  formidable  disease. 

Dana-Farber  is  a  treatment,  research 
and  teaching  facility  affiliated  with 
Harvard  Medical  School.  Its  physicians 
and  researchers  regularly  slog  through 
complex  calculations  to  find  connet 
tions  between  data  gleaned  from  tu 
biopsies  and  other  clinical  samples  and 
the  vast  genetic  research  housed  tvithin 
the  organization  or  spread  among  three 
massive  public-domain  databases. 

Dana-Farber  officials  are  working 
to  leverage  grant  money  and  other 


InforSense 


resources  to  blend  data  warehousing 
capabilities  with  Web-based  data- 

between  patient  samples  and  analyti¬ 
cal  data  will  almost  certainly  prove  the 
crux  of  both  effective  patient  treatment 
and  any  potential  breakthroughs  tied  to 
the  disease,  according  to  researchers. 

The  immediate  goal  is  to  clear  te¬ 
dious  tactical  challenges  that  get  in  the 
way  of  data  sharing.  "We  face  a  real 
problem  of  data  fragmentation  or  data 
balkanization.  Often,  the  data  we  need 
is  divided  into  lots  of  different  subsets, 
since  there  are  so  many  groups  active  in 
this  research."  says  |ohn  Quackenbush. 
a  professor  of  computational  biology 
and  bioinformatics  at  Dana-Farber's 
Department  of  Biostatistics. 

Not  only  is  data  on  multiple  myelo¬ 
ma  and  other  diseases  often  far-flung 
and  fiercely  guarded,  if  is  also  incred¬ 
ibly  complex,  says  Joseph  White,  a  se¬ 
nior  research  scientist  at  Dana-Farber. 
"A  single  gene  may  be  represented  by 
several  different  name  sequences."  he 
explains.  “To  gather  all  of  the  infor¬ 
mation  on  any  one  particular  gene,  a 
researcher  must  look  at  many  sources 
and  different  expressions  for  the  gene." 

To  make  the  hunt  for  precious  ge¬ 
netic  information  easier,  Dana-Farber 
officials  have  stitched  together  a  sys¬ 
tem  that  wraps  in  Oracle’s  Healthcare 
Continued  on  page  36 
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Dana-FaAer 

Cancer 

Institute 

Researchers  can  view 
genetic  information  from 
multiple  databases  with 
a  specially  designed  Web 

EtyJennifer  McAdams 


by  the  National  Cancer  Institute). 
■  Project  champions:  John 


the  any  researchers  approach 


»>  A  CANCER  that  strikes  white  blood 
cells  and  eventually  bone  marrow, 
multiple  myeloma  can  be  difficult  to 
treat.  Now,  the  Dana-Farber  Cancer  In¬ 
stitute  in  Boston  is  harnessing  the  dual 
power  of  business  intelligence  and 
Web  2.0-based  scientific  search  tools 
to  gather  complex,  scattered  data  to 
better  treat  patients  and  work  toward  a 
cure  for  this  formidable  disease. 


and  teaching  facility  affiliated  with 
Harvard  Medical  School.  Its  physicians 
and  researchers  regularly  slog  through 


The  InforSense  ClinicalSense  portal  con¬ 
nects  researchers  to  an  integrated  view 
of  patient  data  and  biomarker  test  results.  I 
Researchers  can  see  at  a  glance  how  pa¬ 
tients  are  associated  with  test  scores  for 
cholesterol  and  white  blood-cell  counts. 


resources  to  blend  data  warehousing 
capabilities  with  Web-based  data- 
collection  tools,  since  vital  connections 
between  patient  samples  and  analyti¬ 
cal  data  will  almost  certainly  prove  the 
crux  of  both  effective  patient  treatment 
and  any  potential  breakthroughs  tied  to 
the  disease,  according  to  researchers. 

The  immediate  goal  is  to  dear  te¬ 
dious  tactical  challenges  that  get  in  the 
way  of  data  sharing.  “We  face  a  real 
problem  of  data  fragmentation  or  data 
balkanization.  Often,  the  data  we  need 
is  divided  into  lots  of  different  subset^ 
since  there  are  so  many  groups  active  in 
this  research,”  says  John  Quackenbush, 
a  professor  of  computational  biology 
and  bioinformatics  at  Dana-Farber’s 
Department  of  Biostatistics. 

Not  only  is  data  on  multiple  myelo¬ 
ma  and  other  diseases  often  far-flung 
and  fiercely  guarded,  it  is  also  incred¬ 
ibly  complex,  says  Joseph  White,  a  se- 


“A  single  gene  may  be  represented 
several  different  name  sequences," 
explains.  “To  gather  all  of  the  infot 
mation  on  any  one  particular  gene,  a 
researcher  must  look  at  many  sources 
and  different  expressions  for  the  gene.” 
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Master  the  art 
of  BlackBerry' 


Introducing  the  new  BlackBerry  Certification  Program. 

With  14  million  (and  growing)  smartphone  users  worldwide,  BlackBerry  continues  to  be  the  way  the  world  does 
business.  That’s  why  the  need  for  a  talented,  reliable  support  team  is  greater  than  ever.  The  new  BlackBerry 
Certification  Program  helps  you  build  a  strong,  confident  IT  team  that  help  navigate  your  business,  .so  you 
and  your  company  can  stay  on  top  of  technology  trendsand  ahead  of  the  competition. 


Help  your  team  master  the  latest  BlackBerry  services  and  technology. 
Visit  blackberry.com/certification. 


BlackBerry. 


Certification  Program 
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Continued  from  page  34 
Transaction  Base,  a  service-oriented 
architecture  that  supports  the  medical 
industry’s  HL7  standard  for  the  elec¬ 
tronic  exchange  of  clinical  data.  The 
project  is  partly  funded  through  a 
$1  million  grant  from  Oracle  Corp. 

To  search  for  genetic  data  contained 
in  the  National  Institutes  of  Health's 
repository  and  other  databases,  Dana- 
Farber  researchers  use  a  Web  portal 
designed  by  InforSense  Ltd.  to  generate 
the  data  and  analyze  workflow. 

“What  we  have  been  doing  is  pulling 
summary  data  on  samples,  along  with 
links  to  public  domain  data  with  the 
InforSense  Web-based  tools,"  Quack- 
enbushsays. 

Tying  publicly  available  data  with 
information  gathered  in-house  is  no 
easy  or  inexpensive  task,  says  Wayne 
Eckerson,  director  of  research  at  The 
Data  Warehousing  Institute  in  Renton, 
Wash.  “In  cases  such  as  these  where 
the  data  is  really  valuable,  organiza¬ 
tions  often  want  to  integrate  publicly 


warehouse,  but  that  is  an  expensive  ap¬ 
proach,"  he  explains.  The  alternative, 
Eckerson  adds.  Is  to  link  to  the  public 
databases  in  real  time  via  an  applica- 


Far  security  and  other  reasons,  Dana- 
Faiber  has  no  interest  in  relying  on  Web- 
based  tools  for  live  access  to  remote 


requires  substantial  investments  of  both 
time  and  money.  “We  are  pulling  from 
a  variety  of  data  sources  and  storing 
information  in  a  central  warehouse. 
While  it  is  great  to  be  able  to  use  Web 
2.0  technologies  to  find  links,  this 
method  still  requires  a  lot  of  computa¬ 
tion  on  our  part’  Quackenbush  says. 


says  White.  “You  want  to  be  able  to  ask 
questions  such  as  ‘How  do  I  cure  can¬ 
cer?’  and  not  be  limited  to  questions 
that  are  too  specific,  such  as  'Does  eat¬ 
ing  beets  have  a  correlation  to  curing 


era  aren’t  willing  to  leave  anything  to 

chance.  ■ 

MgMmhs  is  o/reefnnce  writer 
in  Vienna,  Va.  Contact  her  at 
JMTechWrUer@aoUom. 


Erlanger 
(Ky.)  Police 
Department 


By  Heather  Havenstein 


The  Erlanger  Police  Depart¬ 
ment  serves  a  community  with  a 
population  of  more  than  15,000 
that’s  located  80  miles  north  of 
Frankfurt,  the  state’s  capital. 

■  Project  champions:  Marc 
Fields,  chief  of  police;  Steve 
Castor,  manager  of  the  commu¬ 
nications  center 

■  Project  cost  and  payback  About 
S70.000.  The  department  hopes 
that  it  can  continue  to  handle  the 
5%  to  10%  annual  uptick  in  calls 
without  adding  more  personnel. 


»>  BY  COMBINING  business  intelli¬ 
gence  and  two  foundations  of  Web  2.0 

—  search  and  mapping  —  a  police  de¬ 
partment  in  Kentucky  has  built  a  brand- 
new  window  into  crime.  This  Web- 
based  BI  portal  allows  patrol  officers  to 
enter  data  —  or  even  pieces  of  data  such 
as  a  few  numbers  from  a  license  plate 

—  into  a  simple  search  interface  and  re¬ 
trieve  information  from  their  own  data¬ 
bases  and  those  of  neighboring  towns. 

For  the  past  several  years,  officials 
in  Erlanger.  Ky..  had  been  planning  a 
project  to  consolidate  fire  and  police 
department  communications  for  more 
than  a  dozen  communities  into  Er- 
langer’s  communications  center.  How¬ 
ever.  the  Erlanger  Police  Department 
didn’t  have  a  way  to  tap  into  the  records 
management  systems  of  19  separate 
government  agencies  in  order  to  search 
and  analyze  information  about  sus¬ 
pects,  reported  incidents,  arrests  and 
crimes.  And  even  though  Erlanger  had 


•  been  manually  mapping  crimes  based 
;  on  its  own  data  for  three  years,  the  task 
!  was  time-consuming,  and  the  mapping 
!  wasn't  available  in  real  time.  Moreover. 

'  other  communities'  departments  hadn'O 
'  done  any  crime  mapping,  says  Marc 
;  Fields,  Erlanger's  chief  of  police. 

!  One  search  product  was  able  to 
!  search  Erlanger’s  own  records  man-. — 

!  agement  system,  but  it  couldn't  search— ' 
]  the  systems  operated  by  the  other 
J  agencies.  It  also  didn't  provide  BI 
I  analysis  or  meet  the  mapping  require- 
!  ments  for  the  project. 

!  After  failing  to  find  a  single  product 
;  to  automate  the  entire  crime  map- 
;  ping  and  analysis  process,  Fields  and 
!  his  colleagues  accepted  an  offer  from 
!  the  local  planning  department  to  use 
‘  its  tools:  Environmental  Systems  Re- 
j  search  Institute  Inc.  (ESRI)  geomap- 
;  ping  tools  and  WebFocus  BI  software 
!  from  Information  Builders  Inc. 

!  They  completed  the  system  by  addi  ng 
!  an  open-source  search  appliance  from 
;  Apache  Lucene  and  an  Information 
|  Builders  tool  called  WebFocus  Magnify, 

;  which  compiles  structured  and  unstruc- 
!  tured  data  references  into  an  index  that 
!  can  easily  be  searched  by  an  appliance, 
j  Magnify  then  uses  metadata  about  the 
I  j  structured  data  to  categorize  search 
!  results  to  give  users  a  better  context 
1  and  relevancy  for  queries. 

I  !  By  mashing  together  search.  BI  and 
J  mapping,  the  new  Web-based  system 
|  combineS^eal-time  crime  data  from 
!  multiple  agencies  with  crime  records 
!  and  incident  reports  stretching  back 
'  five  years  to  link  information  about  sus- 
|  pects,  incidents  and  arrests.  In  July,  the 
i  ;  Erlanger  police  department  rolled  out 
!  the  system  to  150  patrol  officers,  who 
!  can  access  it  from  displays  in  their  cars 
!  powered  by  cellular  signals, 
j  ’TMagnifyl  was  really  able  to  capture 
J  both  of  the  goals  —  to  more  completely 
I  search  our  records  management  sys- 
1  terns  and  at  the  same  time ...  to  create 
■  maps  and  information  that  officers 
1  could  use  to  more  efficiently  go  about 
j  their  daily  activities,"  says  Steve  Cas- 
j  tor,  manager  of  the  communications 
;  I  center.  iOfficers]  can  see  over  the  last 
!  24  hours  where  calls  have  occurred 
|  and  compare  crime  stats  against  last 
J  year’s  data  and  this  year’s  data." 

|  Or  an  officer,  for  example,  could 
!  type  a  partial  license  plate  number  into 
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Erlanger 
(Ky.)  Police 
Department 


By  mashing  together 
search,  Bl  and  mapping, 
police  officers  can  view 
real-time  crime  data  along 
with  past  records. 

By  Heather  Havenstein 


AT  A  OUNCE 


The  Erlanger  Police  Depart¬ 
ment  serves  a  community  with  a 
population  of  more  than  15.000 
that's  located  80  miles  north  of 
Frankfurt,  the  state's  capital. 


»>  BY  COMBINING  business  intelli¬ 
gence  and  two  foundations  of  Web  2.0 

—  search  and  mapping  —  a  police  de¬ 
partment  in  Kentucky  has  built  a  brand- 
new  window  into  crime.  This  Web- 
based  BI  portal  allows  patrol  officers  to 
enter  data  —  or  even  pieces  of  data  such 
as  a  few  numbers  from  a  license  plate 

—  into  a  simple  search  interface  and  re¬ 
trieve  information  from  their  own  data¬ 
bases  and  those  of  neighboring  towns. 

For  the  past  several  years,  officials 
in  Erlanger,  Ky.,  had  been  planning  a 
project  to  consolidate  fire  and  police 
department  communications  for  more 


been  manually  mapping  crimes  based 
on  its  own  data  for  three  years,  the  task 
was  time-consuming,  and  the  mapping 
wasn’t  available  in  real  time.  Moreover, 
other  communities’  departments  hadn’t 
done  any  crime  mapping,  says  Marc 
Fields,  Erlanger’s  chief  of  police. 

One  search  product  was  able  to 
search  Erlanger’s  own  records  man¬ 
agement  system,  but  it  couldn’t  search 
the  systems  operated  by  the  other 
agencies.  It  also  didn’t  provide  BI 
analysis  or  meet  the  mapping  require¬ 
ments  for  the  project. 

After  failing  to  find  a  single  product 
to  automate  the  entire  crime  map¬ 
ping  and  analysis  process,  Fields  and 
his  colleagues  accepted  an  offer  from 
the  local  planning  department  to  use 
its  tools:  Environmental  Systems  Re¬ 
search  Institute  Inc.  (ESRI)  geomap¬ 
ping  tools  and  WebFocus  BI  software 
from  Information  Builders  Inc. 

They  completed  the  system  by  adding 
an  open-source  search  appliance  from 
Apache  Lucene  and  an  Information 
Builders  tool  called  WebFocus  Magnify, 
which  compiles  structured  and  unstruc¬ 
tured  data  references  into  an  index  that 
can  easily  be  searched  by  an  appliance. 
Magnify  then  uses  metadata  about  the 
structured  data  to  categorize  search 
results  to  give  users  a  better  context 
and  relevancy  for  queries. 

By  mashing  together  search,  BI  and 
mapping,  the  new  Web-based  system 
combines  real-time  crime  data  from 
multiple  agencies  with  crime  records 
and  incident  reports  stretching  back 
five  years  to  link  information  about  sus¬ 
pects,  incidents  and  arrests.  In  July,  the 
Erlanger  police  department  rolled  out 
the  system  to  150  patrol  officers,  who 
can  access  it  from  displays  in  their  cars 
powered  by  cellular  signals. 

“[Magnify]  was  really  able  to  capture 
both  of  the  goals  —  to  more  completely 
search  our  records  management  sys¬ 
tems  and  at  the  same  time ...  to  create 
maps  and  information  that  officers 
could  use  to  more  efficiently  eo  about 
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&Co. 


This  reinsurance  company 
pairs  location  intelligence 
with  risk  management  data 
to  prepare  for  bad  weather. 
By  Jennifer  McAdams 

>»  RATHER  UNPREDICTABLE  hail 
pounds  U.S.  crops  and  property  to  the 
tune  of  about  $1  billion  worth  of  dam¬ 
age  each  year,  according  to  the  National 
Weather  Service.  These  icy  agents  of 
chaos  account  for  just  one  of  many  cata¬ 
strophic  scenarios  that  Guy  Carpenter 
&  Co.  must  simulate  and  model,  if  the 
company  is  to  protect  its  policyholders 
and  stay  one  step  ahead  of  disasters. 

As  a  major  reinsurance  firm.  New 
York-based  Guy  Carpenter  sells  policies 
to  other  insurance  companies.  Most  of 
Guy  Carpenter’s  clients  are  looking  for 


added  protection  from  those  disasters 
that  are  either  difficult  to  predict  or  tend 
to  be  the  most  Hamaging. 

It's  risky  business,  indeed,  and  the 
company’s  strength  depends  on  its  abil¬ 
ity  to  calculate  not  only  its  own  risks. 


but  also  those  facing  its  many  clients. 

To  best  serve  the  array  of  parties  in¬ 
volved  and  to  make  the  best  projections, 
Guy  Carpenter  has  blended  business 
intelligence  and  Web  2.0  technologies 
and  layered  the  resulting  application 
with  advanced  mapping  capabilities. 


vices  such  as  catastrophe  modeling, 
portfolio  management  and  exposure 
management.  All  of  these  services  gen¬ 
erate  a  voluminous  amount  of  data  that 
has  geographic  context,”  says  Shajy 
Mathai,  managing  director. 

To  meet  these  challenges,  Guy 
Carpenter  has  put  in  place  a  system 
dubbed  i-aXs,  which  is  infused  with 
location  intelligence  and  online  risk 
management  capabilities,  among  oth¬ 
ers.  The  system  relies  on  MicroStrat- 
egy  Inc.’s  MicroStrategy  8  BI  software. 
Mathai  recalls  trying  many  combina¬ 
tions  before  settling  on  the  i-aXs  ap¬ 
proach.  “We  investigated  products  until 
we  found  a  combination  of  a  database, 
BI,  mapping,  and  [extract,  transform 
and  load]  capabilities  that  had  sufficient 
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The  terra  firma 
for  IT  vertigo. 


“  its  clients  for  potential- 
ly  devastating  losses, 
particularly  from  bad 
weather.  “Our  clients’ 
data  is  intersected 
with  weather  data,  so 


and  there  is  a  lot  of  it,  or  you  need  to 
apply  complex  transformations  to  inte¬ 
grate  or  clean  it  and  need  high  perfor¬ 
mance,  then  warehouse  it,”  Eckerson 
advises.  "If  you  only  need  data  around 
the  edges  of  your  application  and  there 


All  those  competing  information  requests  can  make  you  dizzy. 

The  CEO  needs  to  know  P&L  performance  by  business  unit.  The  CFO  needs  to  know  he’s  meeting  compliance 
regulations.  And  a  dozen  business  managers  need  to  know  how  to  increase  output  but  not  staff. 

Trying  to  help  them  all  isn’t  easy.  But  it  could  be  easier  —  with  IBM  Cognos  8  Business  Intelligence,  pan 
of  IBM’s  Information  on  Demand  solutions  for  business  optimization.  With  Cognos,  you  can  minimize 
competing  requests  by  empowering  users  to  easily  find  what  they  need.  And,  with  our  open,  Web-based  SOA, 
you  can  seamlessly  integrate  our  solution  into  your  existing  environment.  Plus,  only  Cognos  provides  the 
added  value  of  expertise  and  best  practices  with  industry-specific  blueprints  and  BI  Competency  Center 
development  —  which  means  you’ll  always  stay  on  solid  footing. 

Proceed  with  confidence.”  To  find  out  more,  visit  www.cognos.com/terrafirma  today. 
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■  SPOTLIGHT  !  BUSINESS  INTELLIGENCE 


A  Bl-Web  2.0  mashup 
allows  engineers  to  search 
for  parts  information  in 
a  Google-like  format. 

By  Thomas  Hoffman 

»>  BY  THE  TIME  Leon  Shivamber  was 
hired  in  2004  by  Harris  Corp.  as  vice 
president  of  supply  chain  and  opera¬ 
tions,  the  company  had  already  shifted 
out  of  its  semiconductor  and  printing 
businesses  and  was  focused  squarely 
on  building  communications  systems 
for  governmental  and  commercial 
customers.  But  the  company  still  had 
a  very  divisional  structure  for  its  four 
businesses. 

“We  felt  there  was  a  need  to  bring 
our  [business]  divisions  and  our  sup¬ 
pliers  closer  and  provide  a  new  plat¬ 
form  to  help  people  make  better  deci¬ 
sions,"  says  Shivamber. 

Key  to  the  company’s  strategy  was 
finding  an  effective  way  to  collate  data 
from  the  four  disparate  manufactur¬ 
ing  resource  planning  (MRP)  systems 
used  by  each  of  its  divisions.  When 
Harris’  engineering  teams  assemble  a 
bid  for  building  a  communications  sys¬ 
tem  for  a  prospective  customer,  they 
typically  tap  its  MRP  systems  to  find 
supply  chain  and  technical  informa¬ 
tion,  such  as  the  cost,  availability  or 


Vital  to  the  success  of  the  project 
was  building  in  a  search  platform  that 
would  enable  employees  to  effectively 
locate  information  about  component 
costs,  life-cycle  status  and  other 
specifications  from  its  65  million-plus 
parts  inventory.  Harris  builds  fewer 
than  1  million  of  those  parts,  with  the 
remainder  distributed  by  thousands  of 
suppliers,  says  Shivamber. 

Harris  selected  a  search  and  discovery 
offering  from  Endeca  Technologies 
Inc.  At  the  heart  of  the  system  is  a 
“massive"  data  warehouse  fed  by  a  va¬ 
riety  of  databases  throughout  the  com¬ 
pany,  says  Shivamber.  The  tool,  he  says, 
features  Web  2.0-type  search  capabili¬ 
ties  that  allow  engineers  and  others  to 
search  for  parts  information  “easily  —  in 
an  organized,  Google-like  format.” 

Mashing  search  capabilities  into 
BI  environments  is  a  trend  that  has 
gained  traction  over  the  past  few  years, 
but  isn’t  yet  widespread,  says  Dan 
Vesset,  an  analyst  at  IDC.  Mashups 
like  the  one  in  use  at  Harris  “are  a  key 
component  to  making  BI  more  perva¬ 
sive,  more  visual,"  he  says. 

A  few  factors  complicated  Harris' 
initial  efforts.  When  the  project  first 
started,  a  set  of  European  regulations 


tain  chemicals  and  hazardous  materi¬ 
als  in  electrical  and  electronic  compo¬ 
nents.  Other  countries,  such  as  China, 
impose  a  different  set  of  thresholds,  so 
the  then-emerging  European  regula¬ 
tions  made  compliance  “more  compli¬ 
cated"  for  Harris,  says  Jan  Jakobsze,  a 
supply  chain  engineer. 

In  addition,  the  project  team  had  to 
work  with  Endeca  to  meet  Harris’  own 
highly  specified  search  requirements. 
Whereas  some  of  Endeca's  other 
clients  might  be  used  to  searching 
against  contextual  data,  Harris’  engi¬ 
neers  needed  to  search  against  more 
granular  information  “with  precision” 
across  more  than  200  attributes  for 
each  component  in  its  supply  chain, 
says  Tom  Smura,  the  company’s  IT  and 
supply  chain  manager. 

Harris'  project  team  has  been  able  to 
work  through  those  issues  and  make 
its  vast  supply  chain  considerably  more 
collaborative  —  and  cost-effective  — 
through  its  Bi-Web  2.0  mashup.  In  fact, 
Shivamber  says  that  the  project  has 
already  paid  for  itself  through  the  cost 
savings  achieved  by  each  of  the  busi¬ 
ness  divisions  and  system  chargebacks 
that  have  been  accrued  to  them.  ■ 


Your  business  has  more  applications  and  the  same 
sized  server  room.  May  we  suggest  consolidation? 
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■  SPOTLIOHT  |  OPINION 

Mark  Hall 


Get  Smashed, 
Not  Mashed 


I 


HATE  TO  BE  the  teetotaler  at  the  mashup  party, 
but  someone  has  to  take  a  sober  look  at  the  security 
implications  of  this  emerging  approach  to  business 
intelligence. 


with  your  own  data  to 
yield  new  information 
or  insight. 

Think  about  that  for  a 
minute.  Data  from  some¬ 
where  else  running  on 
your  network?  Even  if  the 
person  who  initiates  the 
mashup  believes  the  data 
comes  from  a  trusted 
source,  do  you  know  if 
the  originating  systems 
meet  your  security  stan¬ 
dards?  Are  those  systems 
at  current  patch  levels?  If 
your  business  works  in  a 
regulated  environment, 
will  such  a  mashup  put 
you  out  of  compliance? 

Do  you  have  people  on 
staff  who  are  up  to  date  on 
mashup  security  issues? 
Here’s  one  to  consider: 

For  mashups  to  work,  you 
have  to  suspend  the  secu¬ 
rity  feature  in  browsers 
called  same-origin  policy. 
Same-origin  was  designed 


to  stop  one  Web  site  from 
dropping  malicious  code 
onto  another. 

Oh,  and  then  there's  Ja¬ 
vaScript  Does  the  mashup 
your  company  is  creating 
include  JavaScript  from 
outside  your  company? 

Think  about  that  one. 
Your  data.  Someone 
else’s  script  processing 
it.  Is  it  proprietary  data 
of  special  value  to  your 
enterprise?  Do  you  know 
exactly  what  the  script 
does  with  your  data? 

You  should  also  ask 
yourself  whether  you 
would  treat  the  data  in 
a  traditional  BI  app  as 
cavalierly  as  some  people 
use  data  in  a  mashup. 

As  Chris  Rafter,  vice 
president  of  consulting 
services  at  Logicalis  Inc., 

■  The  bald  fad 
is  that  mashups 


open  anot 
door  for  nr 


a  technology  services 
company  with  a  BI  prac¬ 
tice,  explained  to  me, 
“Mashups  violate  some 
of  the  unwritten  rules  of 
business  intelligence.” 

For  example,  he  says, 

BI  apps  are  generally  built 
around  a  data  warehouse, 
which  is  highly  secured 
and  certainly  unreachable 
by  outsiders.  He  also  notes 
that  good  governance  for 
BI  precludes  generating 
reports  laden  with  unau¬ 
dited  external  data. 

This  isn’t  to  say  you 
shouldn’t  explore  mashup 
technology  behind  your 
firewall  and  with  your 
own  data  sources,  or  with 
data  from  established 
and  vetted  partners 
whose  scripts  you  have 
scrutinized  and  tested. 
Mashups  can  be  a  quick 
way  for  business  analysts 
to  get  insight  from  the 
knowledge  locked  in  dif¬ 
ferent  silos  inside  your 
organization,  where  most 


of  the  illuminating  in¬ 
formation  about  and  for 
your  business  resides. 

But  be  wary  of  business 
units  that  want  to  contrast 
internal  data  with  out¬ 
siders  —  say,  a  boutique 
market  research  house 
that  can  stream  informa¬ 
tion  to  your  network.  The 
data  may  be  golden,  but  it 
could  turn  into  fool's  gold 
if  that  firm’s  data-stream- 
ing  application  doesn’t 
conform  to  WS-Security 
standards  and  its  program 
gets  compromised. 

The  bald  fact  is  that 
mashups  open  another 
door  for  malware. 

Earlier  this  year,  IBM 
contributed  code  called 
Smash  (a  play  on  the  term 
“secure  mashups”)  to  the 
OpenAjax  Alliance,  an 
open-source  consortium 
that  promotes  IT’s  use  of 
AJAX,  the  technical  foun¬ 
dation  of  mashups.  Smash 
permits  two  sources  to 
supply  content  for  a  mash¬ 
up  but  keeps  the  source 
material  separate,  opening 
a  secure  communications 
channel  between  the 
sources  so  the  mashup  can 
occur.  If  you’re  not  using 
Smash  or  tools  like  it  to  se¬ 
cure  your  mashups,  you’re 
taking  a  gamble  with  your 
company’s  reputation  and 
its  information. 

But,  hey,  don’t  let  me 
spoil  the  party.  ■ 

Mark  Hal  is  a  former 
Computerworld  editor  at 
large.  Contact  him  at  mark. 
everett.haU@comcast.net 
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9  Q&A 

Do  You  Know 
Your  Type? 

I  ViNonality  can  determine 
w  hie  h  job  you  prefer  and 
how  \'ou  ebnnminieate. 


Does  your  personality  type 
have  relevance  for  your 
career?  To  answer  that,  we 
turned  to  Kip  Parent,  CEO 
of  Keirsey.com  Inc.,  which 
markets  the  Keirsey  Tempera¬ 
ment  Sorter,  and  Edward  Kim.  I 
managing  director  of 
Keirsey's  professional 
services  division  at  H  ^ 

Synergy  Leaders  LLC.  t 

Is  there  a  typical  per-  VX 

sonality  type  that's 
well  suited  to  IT? 

KP:  IT  has  become  a  com- 
ptex  industry,  encompass-  ■■■■ 

ing  a  number  of  different  W 
iobs.  We  have  found  that 
there  are  indeed  some 
cpmmon  personality  types 
that  gravitate  toward  certain 
roles  within  IT. 

For  eranple.ir-e  type  I  •  -| 

that  we  most  often  hnd  in 

the  software  developer*  HB 

is  what  Keirsey  calls  tne  KS 

Rational-Architects  (INTP.  IffiB 

see  chart).  These  types' communi¬ 
cation  and  viewpoint  of  the  wodd 
are  abstract.  They  are  attracted  to 
this  role  because  they  are  able  to 
continuously  learn  new  skills  and  try 
new  techniques  in  building  complex 
solutions.  Usually,  though,  this  type 


has  little  interest  in  the  details  of 
implementation.  They  also  prefer 
to  work  autonomously  and  without 
interruption.  Quite  otten.  a  type 
similar  to  the  Rational-Architect 
-  the  Rational-Field  Marshal  (ENTJ) 
or  the  Rational-Mastermind  (INTJ) 
-will  become  the  manager 
of  the  team,  which  cre- 
t  ates  a  bridge  between  the 

r  developers  and  the  more 

rS  concrete  outside  world. 

Eh.  A  drastically  different 
personality  lype  is  found 
jlKH  in  the  OA  function.  The 
■■B  more  careful,  methodical. 

step-by-step,  linear  think- 
jJA  ers  are  best  suited  for  QA. 
^  and  most  often  we  find 
the  Guardian-Supervisor 
(ESTJ)  and  the  Guardian- 
Inspector  tISTJ)  m  thus  role 
These  type  don't  missa 
suing!  They  otten  take  lead- 
Sfflfl  ing  roles  in  QA.implement- 
SwM  ing  comprehensive  test 
BUi  suites  and  making  sure  all 
|  code  is  tested  before  release.  These 
types  usually  become  the  manag¬ 
ers  of  this  area  because  they  are 
extremely  thorough,  concrete,  and 
seek  closure  on  projects. 

In  tech  support,  the  personality 
types  we  hnd  are  those  who  like 


Id  solve  problems  quickly.  The 
Artisan-Performers  (ESFP)  and  the 
Artisan-Promoters  (ESTP)  otten 
excel  in  this  role  because  they  are 
the  best  troubleshooters  and  work 
well  with  people.  These  types  have 
tactical  intelligence,  meaning  they 
are  instinctively  adaptive  and  focus 
on  immediate  outcomes. 

Have  there  been  any  changes 
in  the  types  attracted  to  IT? 

KP:  Among  more  recent  college 
graduates,  we  have  lound  that 
Ihese  same  types  dominate  the  IT 
field.The  technical  demands  of  the 
profession  seem  to  filter  out  people 
pretty  early.  The  one  area  where  we 
have  seen  a  lot  of  growth  in  diversity 
of  personality  types  has  been  with 
HTML  developers.  This  seems  to  be 
a  more  freewheeling  area,  usually 
requinng  design  skills,  so  we  tend 
to  see  a  lot  more  of  the  Artisan  and 
Idealist  temperaments  here. 

Is  there  a  conflict  between 
the  stereotypical  IT  personal¬ 
ity  and  the  traits  common  to 
leaders,  such  as  CIOs? 

K  P:  A  typical  conflict  between  the 
CIO  (often  a  Guardian-Supervisor 


or  Guardian-Inspector)  and  the 
software  development  stall  is  over  , 
schedules  and  timelines.  The  CIO  is 
pulled  by  the  needs  ot  the  company, 
which  are  usually  heavily  time-con¬ 
strained.  The  developers  are  driven 
by  the  elegance  and  "correctness" 
ol  their  solution.  To  them,  schedules 
seem  arbitrary  and  irrelevant.  This 
conflict  can  be  compounded  by  the 
tact  that  Guardians  are  “concrete" 

In  their  communication  and  outlook 
(with  both  leet  on  the  ground),  while 
Ratals  are  "abstract"  (with  their 
brains  wrapped  up  in  complexity). 

How  does  knowing  one’s  own 
personality  type  influence  ca¬ 
reer  choices  and  trajectories? 

EK:  It  can  be  one  of  the  most 
important  factors  in  considering  a 
career.  It  hot  only  helps  people  fig¬ 
ure  out  their  likes  and  dislikes:  it  also 
provides  dala  on  their  most  natural 
talents  and  informs  how  they  are 
different  or  similarlo  others  in  the 
industry.  Understanding  personality 
types  can  provide  the  critical  insight 
that  makes  all  the  difference  tor 
eftectiveness.  both  at  the  Individual 
arid  organizational  levels. 

-  JAMIE  ECKLE 


Temperament  101 


Keirsey  Temperament 
Theory  recognizes  16  distinct 
personality  types  that  are  de¬ 
fined  by  where  a  person  falls  in 
four  separate  pairs  of  prefer¬ 
ences.  Each  paired  personality 
factor  is  represented  by  a  let¬ 
ter  so  that  the  16  personality 
types  are  often  referred  to  in  a 
shorthand  way.  For  example. 
ESTP  or  INFJ  -  that  is.  Extra¬ 
version-Sensation-Thinking- 
Perceiving  or  Introversion-In¬ 
tuition-Feeling-Judging.  Clini¬ 
cal  psychologist  David  Keirsey 


provides  detailed  descriptions 
and  names  for  each  of  these 
16  personality  types  in  his 
Please  Understand  Me  books. 
Through  his  research.  Keirsey 
found  that  these  16  personality 
types  can  be  grouped  into  four 
basic  temperament  groups: 
Artisans.  Guardians.  Rationals 
and  Idealists.  Both  individuals 
and  entire  teams  can  take  the 
Keirsey  Temperament  Sorter 
and  learn  about  these  per¬ 
sonality  types  online  at  www. 
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■  QAA 

Do  You  Know 
Your  Type? 

Personality  can  determine 
which  job  you  prefer  and 
how  you  communicate. 


maitststheKeiresyTempere- 
■mm  Sorter,  and  Edward  Kim, 


has  little  interest  in  the  details  of 
implementation.  They  also  prefer 
to  work  autonomously  and  without 
interruption.  Quite  often,  a  type 
similar  to  the  Rational-Architect 
-  the  Rational-Field  Marshal  (ENTJ) 
or  the  Rational-Mastermind  (INTJ) 


managing  director  of 
Keirsay's  professional 
services  division  at 
Synergy  Leaders  LLC. 

Is  there  a  typical  per¬ 
sonalty  type  that's 
wel  suited  tom 

KP:  IT  has  become  a  com¬ 
plex  industry,  encompass¬ 
ing  a  number  of  different 
jobs.  We  have  found  that 
there  are  indeed  some 
common  personality  types 
that  gravitate  toward  certain 
roles  within  IT. 

For  example,  the  type 
that  we  most  often  find  in 
the  software  developer  role 
is  what  Keirsey  cals  the 
Rational-Architects  (INTP, 


-  will  become  the  manager 
of  the  team,  which  cre¬ 
ates  a  bridge  between  the 
developers  and  the  more 
concrete  outside  world. 

EK:  A  drastically  different 
personality  type  is  found 
in  the  QA  function.  The 
more  careful,  methodical, 
step-by-step,  linear  think¬ 
ers  are  best  suited  for  QA, 
and  most  often  we  find 
the  Guardian-Supervisor 
(ESTJ)  and  the  Guardian- 
Inspector  (ISTJ)  in  this  role. 
These  types  don't  miss  a 
thing!  They  often  take  lead¬ 
ing  roles  in  QA,  implement¬ 
ing  comprehensive  test 
suites  and  making  sure  all 


see  chart).  These  types'ci 
cation  and  viewpoint  of  the  world 
are  abstract  They  are  attracted  to 
this  role  because  they  are  able  to 
continuously  learn  new  skills  and  try 


solutions.  Usually,  though,  this  type 


code  Is  tested  before  release.  These 
types  usually  become  the  manag¬ 
ers  of  this  area  because  they  are 
extremely  thorough,  concrete,  and 
seek  closure  on  projects. 

In  tech  support,  the  personality 
types  we  find  are  those  who  like 


to  solve  problems  quickly.  The 
Artisan-Performers  (ESFP)  and  the 
Artisan-Promoters  (ESTP)  often 
excel  in  this  role  because  they  are 
the  best  troubleshooters  and  work 
well  with  people.  These  types  have 
tactical  intelligence,  meaning  they 
are  instinctively  adaptive  and  focus 
on  immediate  outcomes. 

Have  there  been  any  change! 
in  the  types  attracted  to  IT? 

KP:  Among  more  recent  college 
graduates,  we  have  found  that 
these  same  types  dominate  the  IT 
held.  The  technical  demands  of  the 
profession  seem  to  filter  out  people 
pretty  early.  The  one  area  where  we 
have  seen  a  lot  of  growth  in  diversity 
of  personality  types  has  been  with 
HTML  developers.  This  seems  to  be 
a  more  freewheeling  area,  usually 
requiring  design  skills,  so  we  tend 
to  see  a  lot  more  of  the  Artisan  and 
Idealist  temperaments  here. 

Is  there  a  conflict  between 
the  stereotypical  IT  personal¬ 
ity  and  the  traits  common  to 
leaders,  such  as  CIOs? 

KP:  A  typical  conflict  between  the 
CIO  (often  a  Guardian-Supervisor 


or  Guardian-Inspector)  and  the 
software  development  staff  is  over 
schedules  and  timelines.  The  CIO  is 
pulled  by  the  needs  of  the  company, 
which  are  usually  heavily  time-con¬ 
strained.  The  developers  are  driven 
by  the  elegance  and  "correctness* 
of  their  solution.  To  them,  schedules 
seem  arbitrary  and  irrelevant.  This 
conflict  can  be  compounded  by  the 
fact  that  Guardians  are  "concrete" 
in  their  communication  and  outlook 
(with  both  feet  on  the  ground),  while 
Rationals  are  "abstract"  (with  their 
brains  wrapped  up  in  complexity). 

How  does  knowing  one's  own 

reer  choices  and  trajectories? 

EK:  It  can  be  one  of  the  most 
important  factors  in  considering  a 
career.  It  not  only  helps  people  fig¬ 
ure  out  their  likes  and  dislikes:  it  also 
provides  data  on  their  most  natural 
talentsandinformshowtheyare 
different  or  similar  to  others  in  the 
industry.  Understanding  personality 
types  can  provide  the  critical  insight 
that  makes  all  the  difference  for 
effectiveness,  both  at  the  individual 
and  organizational  levels. 

-  JAMIE  ECKLE 


Temperament  101 


Keirsey  Temperament 
Theory  recognizes  16  distinct 
personality  types  that  ere  de¬ 
fined  by  where  a  person  falls  in 
four  separate  pairs  of  prefer¬ 
ences.  Each  paired  personality 
factor  is  represented  by  a  let¬ 
ter  so  that  the  16  personality 
types  are  often  referred  to  in  a 


provides  detailed  descriptions 
and  names  for  each  of  these 
16  personality  types  in  his 
Haase  Understand  Me  books. 
Through  his  research,  Keirsey 
found  that  these  16  personality 
types  can  be  grouped  into  four 
basic  temperament  groups: 
Artisans.  Ouardians.  Rationals 


ESTP  or  1NFJ  -  that  is,  Extra- 
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cal  psychologist  David  Keiisey 


and  entire  teams  can  take  the 
Keirsey  Temperament  Sorter 


sonality  types  online  at  www. 


COKIPUTEItWOPLD  SEPTEMBER  1,  2008 


Co-Branded 

EMAIL 

BLASTS 


Reach  your  target  audience 
of  professional  IT  job  seek¬ 
ers  with  Computerworld’s 
Co-Branded  Email  Blasts. 
This  unique  program  allows 
you  to  choose  your  criteria 
of  100%  opt-in  subscribers 
by  geography,  company 
size,  job  title  and  industry. 


Call  Dawn  Cora  at 
800-762-2977  for  details! 
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Congratulations  to 
our  Finalists! 

Computerworld’s  Green  IT  Symposium  proudly 
presents  the  “Best  Practices  in  Green  IT"  Awards 
Program.  Honorees  will  be  recognized  at  the  gala 
evening  on  Thursday,  September  18. 

This  program  honors  IT  user  “best  practice"  case  studies 
selected  from  a  field  of  qualified  finalists. 


Finalists  in  each  of  the  following  categories  are: 

Green  IT  in  the  Data  Center 

•  Avnet,  Inc.,  Phoenix,  Arizona 

•  BT  Group  pic,  London,  United  Kingdom 

•  eNation  Corporation,  Calgary,  Alberta 

•  IBM,  Somers,  New  York 

•  Unisys  Corporation,  Eagan,  Minnesota 

IT  Leadership  in  Embracing  Change  with  Green  IT: 
Corporate  Responsibility 

•  Applied  Materials,  Santa  Clara,  California 

•  Enterprise  Rent-A-Car,  St.  Louis.  Missouri 

•  HSBC,  Salinas,  California 

•  Procter  &  Gamble,  Cincinnati,  Ohio 

•  Southern  Company,  Atlanta,  Georgia 

Reducing  IT  Complexity  Increases  Green  IT 

•  Adelphi  University,  Garden  City,  New  York 

•  Del,  Inc.,  Round  Rock.  Texas 

•  Infosys  Technologies  Limited,  Bangalore,  Karnataka 

•  Sprint  Nextel,  Overland  Park,  Kansas 

•  University  of  California  Irvine,  Irvine,  California 

ROI  in  Green  Computing 

•  gm2  Logistics  Limited.  Erith,  United  Kingdom 

•  Indiana  Office  of  Technology,  Indianapolis,  Indiana 

•  IT-Systemhaus  der  Bundesagentur  fOr  Arbeit,  Numberg,  Germany 

•  Miami-Dade  County  Public  Schools,  Miami,  Florida 

•  United  States  Government  Printing  Office  (GPO),  Washington,  D.C. 


I  FRANKLY  SPEAKING 


Frank  Hayes 

Counterintuitive 


ON  THIS  LABOR  DAY  2008,  what’s  the  state  of  IT 
work?  Paradoxical  Here,  look:  A  survey  released 
last  week  by  ChangeWave  Research  says  that  30% 
of  U.S.  IT  shops  are  spending  less  than  they 
planned  this  quarter  —  and  29%  plan  to  keep  cutting  their  IT 
budgets  until  next  year.  Only  13%  plan  to  increase  spending. 
Then  why  is  it  so  hard  to  find  IT  people  to  hire  these  days? 


And  it  is,  according  — 
reporter  Todd  Weiss  in 
this  issue  of  Computer- 
,  world  (see  story,  page 
:  14).  Overall  IT  hiring 
is  at  a  standstill  and  IT 
salaries  are  flat,  but  com¬ 
panies  looking  for  some 
specialized  tech  skills 
—  wireless,  ERP,  virtual¬ 
ization,  embedded,  Web 
2.0  —  are  having  a  tough 
time  tracking  down  can¬ 
didates  at  any  price. 

That’s  not  the  only 
apparent  contradiction 
in  IT  work  these  days. 
Here’s  another;  Even 
as  budgets  keep  getting 
tighter,  the  focus  of  IT 
projects  is  no  longer  on 
cutting  costs. 

Why  not?  Probably 
.  because  there’s  not  a  lot 
:  left  that  can  be  trimmed 
easily.  IT  has  been  help¬ 
ing  our  companies  cut 
for  years.  The  quick-hit 
automation  has  already 
been  done,  and  there’s  no 
money  in  the  budget  right 
now  for  enterprise-scale 
projects.  What’s  left?  IT 


projects  that  will  actually 
help  grow  the  business. 
That  sounds  like  an¬ 


do  you  grow  a  business 
when  the  economy  is 
tanking?  By  stealing  sales 
and  customers  from  your 
competitors,  thus  boost¬ 
ing  your  market  share 
as  you  cut  off  the  other 
guy’s  oxygen  when  he 
can  least  afford  it. 

IT  projects  that  help 
your  salespeople  do  that 
will  have  a  much  bigger 
impact  than  yet  another 
round  of  cost-cutting 
tweaks.  Of  course,  those 
projects  are  harder  to  do. 
They  require  develop¬ 
ment  teams  who  know 
the  business  and  the 

■  IT  people  at  big 
companies  are 
having  to  act  like 
they’re  at  small, 


competition  as  well  as 
the  technology,  and  who 
can  listen  closely  to  users 
and  quickly  crank  out  ef¬ 
fective  systems  that  pro¬ 
duce  a  fast  return  on  the 
project’s  investment. 

In  short,  now  that 
cutting  costs  is  off  the 
table,  IT  people  at  big 
companies  are  having  to 
act  as  if  they’re  at  small, 
entrepreneurial  start-ups. 
That’s  right,  it’s  another 
contradiction. 

Here’s  one  more; 

Which  IT  people  have 
the  greatest  job  security 
in  this  counterintuitive 
world?  The  ones  working 
without  a  net  on  the  riski¬ 
est  projects  that,  if  they 
pan  out,  will  show  the 
biggest,  fastest  results. 

Confused?  Don’t  be. 
You  know  that,  in  every 
downturn,  certain  skill 
sets  remain  golden.  This 
time  around,  there’s  also 
a  golden  mind-set. 

It’s  not  about  big  proj¬ 
ects,  long  timelines, 
large  teams  and  complex 
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methodologies.  It’s  not 
about  technical  purity  or 
perfection,  kitchen-sink 
wish  lists  or  complicated 
political  dances. 

It’s  all  about  speed. 
And  business  focus.  And 
technical  sharpness.  And 
intimate  business  knowl¬ 
edge.  It’s  about  getting 
quick  results  from  small 
investments,  delivering 
effective  tools  to  employ¬ 
ees  who  can  use  them  to 
change  the  game. 

Most  of  all,  it’s  about 
grabbing  hold  of  those 


ing  the  realities  behind 
them  and  then  putting 
them  to  work. 

That  mind-set  isn’t 
simple.  And  it  likely 
won’t  be  comfortable  for 
many  people  who  have 
worked  in  big  IT  shops 
for  their  whole  careers. 

Which  brings  us  to 
yet  another  paradox 
in  the  state  of  IT  work 
right  now;  The  people 
who  have  the  strongest, 
clearest,  most  coherent 
sense  of  what  an  IT  shop 
does  are  going  to  have 
the  most  trouble  making 
sense  of  things. 

And  the  IT  people  who 
have  never  quite  fit  in? 
Right  now,  they  may  just 
be  exactly  what  your  IT 
shop  needs.  ■ 

Frank  Hayat  is  Computer- 
world’s  senior  news  col¬ 
umnist  Contact  him  at 
frank_hayes@ 
computerworld.com. 
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Making  IT  work  as  one.  It's  what  sets  us  apart. 

At  Novell,  we're  taking  Interoperability  to  a  whole  new  level.  We  believe  every  person,  every 
partner  and  every  piece  of  your  mixed-IT  world  should  work  as  one.  Our  Enterprise  Linux, 
Security  and  identity  Management,  Systems  Management  and  Collaboration  solutions 
easily  integrate  with  just  about  any  IT  infrastructure.  So  you  can  lower  cost,  complexity  and 
risk  on  virtually  any  platform  and  make  your  IT  work  as  one. 

www. novell.com  N  O  V6 1 1 

Making  IT  Work  As  One™ 
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